1. Tämä sivusto käyttää keksejä (cookie). Jatkamalla sivuston käyttämistä hyväksyt keksien käyttämisen. Lue lisää.

Mese viruksen jälkeen tökkivä kone

Viestiketju Virukset ja haittaohjelmat - HijackThis -logit -osiossa. Ketjun avasi teamsfv 26.08.2008.

Sivu 2 / 2
  1. Hujo

    Hujo Guest

    Avaa Muistio ja kopioi/liitä quoteboxin sisältö sinne:

    Tallenna se nimellä CFScript.txt

    Sitten raahaa CFScript ComboFix.exeen kuten alla.

    [​IMG]

    Käynnistä tietokone uudelleen pyydettäessä ja lähetä combofix.txt-tiedoston sisältö tänne.
     
    Hujo, 27.08.2008
    #21
  2.  
  3. teamsfv

    teamsfv Member

    Liittynyt:
    15.12.2005
    Viestejä:
    42
    Kiitokset:
    0
    Pisteet:
    16
    ComboFix 08-08-26.01 - Outi Röksä 2008-08-27 22:14:07.3 - NTFSx86
    Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1035.18.168 [GMT 3:00]
    Running from: C:\Documents and Settings\Outi Röksä\Työpöytä\ComboFix.exe
    Command switches used :: C:\Documents and Settings\Outi Röksä\Työpöytä\CFScript.txt
    * Created a new restore point

    WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
    .

    (((((((((((((((((((((((((((((((((((((( Muut poistot ))))))))))))))))))))))))))))))))))))))))))))))))))))))))
    .

    C:\Program Files\Java
    C:\Program Files\Java\j2re1.4.2_03\bin\awt.dll
    C:\Program Files\Java\j2re1.4.2_03\bin\axbridge.dll
    C:\Program Files\Java\j2re1.4.2_03\bin\client\jvm.dll
    C:\Program Files\Java\j2re1.4.2_03\bin\client\Xusage.txt
    C:\Program Files\Java\j2re1.4.2_03\bin\cmm.dll
    C:\Program Files\Java\j2re1.4.2_03\bin\dcpr.dll
    C:\Program Files\Java\j2re1.4.2_03\bin\dt_shmem.dll
    C:\Program Files\Java\j2re1.4.2_03\bin\dt_socket.dll
    C:\Program Files\Java\j2re1.4.2_03\bin\eula.dll
    C:\Program Files\Java\j2re1.4.2_03\bin\fontmanager.dll
    C:\Program Files\Java\j2re1.4.2_03\bin\hpi.dll
    C:\Program Files\Java\j2re1.4.2_03\bin\hprof.dll
    C:\Program Files\Java\j2re1.4.2_03\bin\ioser12.dll
    C:\Program Files\Java\j2re1.4.2_03\bin\jaas_nt.dll
    C:\Program Files\Java\j2re1.4.2_03\bin\java.dll
    C:\Program Files\Java\j2re1.4.2_03\bin\java.exe
    C:\Program Files\Java\j2re1.4.2_03\bin\javaw.exe
    C:\Program Files\Java\j2re1.4.2_03\bin\jawt.dll
    C:\Program Files\Java\j2re1.4.2_03\bin\jcov.dll
    C:\Program Files\Java\j2re1.4.2_03\bin\JdbcOdbc.dll
    C:\Program Files\Java\j2re1.4.2_03\bin\jdwp.dll
    C:\Program Files\Java\j2re1.4.2_03\bin\jpeg.dll
    C:\Program Files\Java\j2re1.4.2_03\bin\jpicom32.dll
    C:\Program Files\Java\j2re1.4.2_03\bin\jpicpl32.cpl
    C:\Program Files\Java\j2re1.4.2_03\bin\jpicpl32.exe
    C:\Program Files\Java\j2re1.4.2_03\bin\jpiexp32.dll
    C:\Program Files\Java\j2re1.4.2_03\bin\jpins4.dll
    C:\Program Files\Java\j2re1.4.2_03\bin\jpins6.dll
    C:\Program Files\Java\j2re1.4.2_03\bin\jpins7.dll
    C:\Program Files\Java\j2re1.4.2_03\bin\jpinsp.dll
    C:\Program Files\Java\j2re1.4.2_03\bin\jpishare.dll
    C:\Program Files\Java\j2re1.4.2_03\bin\jsound.dll
    C:\Program Files\Java\j2re1.4.2_03\bin\jucheck.exe
    C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe
    C:\Program Files\Java\j2re1.4.2_03\bin\keytool.exe
    C:\Program Files\Java\j2re1.4.2_03\bin\kinit.exe
    C:\Program Files\Java\j2re1.4.2_03\bin\klist.exe
    C:\Program Files\Java\j2re1.4.2_03\bin\ktab.exe
    C:\Program Files\Java\j2re1.4.2_03\bin\msvcrt.dll
    C:\Program Files\Java\j2re1.4.2_03\bin\net.dll
    C:\Program Files\Java\j2re1.4.2_03\bin\nio.dll
    C:\Program Files\Java\j2re1.4.2_03\bin\NPJava11.dll
    C:\Program Files\Java\j2re1.4.2_03\bin\NPJava12.dll
    C:\Program Files\Java\j2re1.4.2_03\bin\NPJava13.dll
    C:\Program Files\Java\j2re1.4.2_03\bin\NPJava14.dll
    C:\Program Files\Java\j2re1.4.2_03\bin\NPJava32.dll
    C:\Program Files\Java\j2re1.4.2_03\bin\NPJPI142_03.dll
    C:\Program Files\Java\j2re1.4.2_03\bin\NPOJI610.dll
    C:\Program Files\Java\j2re1.4.2_03\bin\orbd.exe
    C:\Program Files\Java\j2re1.4.2_03\bin\policytool.exe
    C:\Program Files\Java\j2re1.4.2_03\bin\RegUtils.dll
    C:\Program Files\Java\j2re1.4.2_03\bin\rmi.dll
    C:\Program Files\Java\j2re1.4.2_03\bin\rmid.exe
    C:\Program Files\Java\j2re1.4.2_03\bin\rmiregistry.exe
    C:\Program Files\Java\j2re1.4.2_03\bin\servertool.exe
    C:\Program Files\Java\j2re1.4.2_03\bin\tnameserv.exe
    C:\Program Files\Java\j2re1.4.2_03\bin\w2k_lsa_auth.dll
    C:\Program Files\Java\j2re1.4.2_03\bin\verify.dll
    C:\Program Files\Java\j2re1.4.2_03\bin\zip.dll
    C:\Program Files\Java\j2re1.4.2_03\CHANGES
    C:\Program Files\Java\j2re1.4.2_03\COPYRIGHT
    C:\Program Files\Java\j2re1.4.2_03\javaws\cacerts
    C:\Program Files\Java\j2re1.4.2_03\javaws\JavaCup.ico
    C:\Program Files\Java\j2re1.4.2_03\javaws\javalogo52x88.gif
    C:\Program Files\Java\j2re1.4.2_03\javaws\JavaWebStart.dll
    C:\Program Files\Java\j2re1.4.2_03\javaws\javaws-l10n.jar
    C:\Program Files\Java\j2re1.4.2_03\javaws\javaws-license.txt
    C:\Program Files\Java\j2re1.4.2_03\javaws\javaws.exe
    C:\Program Files\Java\j2re1.4.2_03\javaws\javaws.jar
    C:\Program Files\Java\j2re1.4.2_03\javaws\javaws.policy
    C:\Program Files\Java\j2re1.4.2_03\javaws\javawspl.dll
    C:\Program Files\Java\j2re1.4.2_03\javaws\Readme_de.html
    C:\Program Files\Java\j2re1.4.2_03\javaws\Readme_es.html
    C:\Program Files\Java\j2re1.4.2_03\javaws\Readme_fr.html
    C:\Program Files\Java\j2re1.4.2_03\javaws\Readme_it.html
    C:\Program Files\Java\j2re1.4.2_03\javaws\Readme_ja.html
    C:\Program Files\Java\j2re1.4.2_03\javaws\Readme_ko.html
    C:\Program Files\Java\j2re1.4.2_03\javaws\Readme_sv.html
    C:\Program Files\Java\j2re1.4.2_03\javaws\Readme_zh_CN.html
    C:\Program Files\Java\j2re1.4.2_03\javaws\Readme_zh_TW.html
    C:\Program Files\Java\j2re1.4.2_03\javaws\resources\copyright.jpg
    C:\Program Files\Java\j2re1.4.2_03\javaws\resources\messages.properties
    C:\Program Files\Java\j2re1.4.2_03\javaws\resources\messages_de.properties
    C:\Program Files\Java\j2re1.4.2_03\javaws\resources\messages_es.properties
    C:\Program Files\Java\j2re1.4.2_03\javaws\resources\messages_fr.properties
    C:\Program Files\Java\j2re1.4.2_03\javaws\resources\messages_it.properties
    C:\Program Files\Java\j2re1.4.2_03\javaws\resources\messages_ja.properties
    C:\Program Files\Java\j2re1.4.2_03\javaws\resources\messages_ko.properties
    C:\Program Files\Java\j2re1.4.2_03\javaws\resources\messages_sv.properties
    C:\Program Files\Java\j2re1.4.2_03\javaws\resources\messages_zh_CN.properties
    C:\Program Files\Java\j2re1.4.2_03\javaws\resources\messages_zh_TW.properties
    C:\Program Files\Java\j2re1.4.2_03\javaws\resources\miniSplash.jpg
    C:\Program Files\Java\j2re1.4.2_03\javaws\resources\splash.jpg
    C:\Program Files\Java\j2re1.4.2_03\javaws\sunlogo64x30.gif
    C:\Program Files\Java\j2re1.4.2_03\lib\audio\soundbank.gm
    C:\Program Files\Java\j2re1.4.2_03\lib\charsets.jar
    C:\Program Files\Java\j2re1.4.2_03\lib\cmm\CIEXYZ.pf
    C:\Program Files\Java\j2re1.4.2_03\lib\cmm\GRAY.pf
    C:\Program Files\Java\j2re1.4.2_03\lib\cmm\LINEAR_RGB.pf
    C:\Program Files\Java\j2re1.4.2_03\lib\cmm\PYCC.pf
    C:\Program Files\Java\j2re1.4.2_03\lib\cmm\sRGB.pf
    C:\Program Files\Java\j2re1.4.2_03\lib\content-types.properties
    C:\Program Files\Java\j2re1.4.2_03\lib\ext\dnsns.jar
    C:\Program Files\Java\j2re1.4.2_03\lib\ext\ldapsec.jar
    C:\Program Files\Java\j2re1.4.2_03\lib\ext\localedata.jar
    C:\Program Files\Java\j2re1.4.2_03\lib\ext\sunjce_provider.jar
    C:\Program Files\Java\j2re1.4.2_03\lib\flavormap.properties
    C:\Program Files\Java\j2re1.4.2_03\lib\font.properties
    C:\Program Files\Java\j2re1.4.2_03\lib\font.properties.CP1250
    C:\Program Files\Java\j2re1.4.2_03\lib\font.properties.CP1251
    C:\Program Files\Java\j2re1.4.2_03\lib\font.properties.CP1253
    C:\Program Files\Java\j2re1.4.2_03\lib\font.properties.CP1254
    C:\Program Files\Java\j2re1.4.2_03\lib\font.properties.CP1256
    C:\Program Files\Java\j2re1.4.2_03\lib\font.properties.CP1257
    C:\Program Files\Java\j2re1.4.2_03\lib\font.properties.hi
    C:\Program Files\Java\j2re1.4.2_03\lib\font.properties.iw
    C:\Program Files\Java\j2re1.4.2_03\lib\font.properties.ja
    C:\Program Files\Java\j2re1.4.2_03\lib\font.properties.ko
    C:\Program Files\Java\j2re1.4.2_03\lib\font.properties.MS950_HKSCS
    C:\Program Files\Java\j2re1.4.2_03\lib\font.properties.ru
    C:\Program Files\Java\j2re1.4.2_03\lib\font.properties.th
    C:\Program Files\Java\j2re1.4.2_03\lib\font.properties.zh
    C:\Program Files\Java\j2re1.4.2_03\lib\font.properties.zh.98
    C:\Program Files\Java\j2re1.4.2_03\lib\font.properties.zh_CN_GB18030
    C:\Program Files\Java\j2re1.4.2_03\lib\font.properties.zh_TW
    C:\Program Files\Java\j2re1.4.2_03\lib\font.properties.zh_TW.95
    C:\Program Files\Java\j2re1.4.2_03\lib\font.properties.zh_TW_MS950_HKSCS
    C:\Program Files\Java\j2re1.4.2_03\lib\fonts\LucidaBrightDemiBold.ttf
    C:\Program Files\Java\j2re1.4.2_03\lib\fonts\LucidaBrightDemiItalic.ttf
    C:\Program Files\Java\j2re1.4.2_03\lib\fonts\LucidaBrightItalic.ttf
    C:\Program Files\Java\j2re1.4.2_03\lib\fonts\LucidaBrightRegular.ttf
    C:\Program Files\Java\j2re1.4.2_03\lib\fonts\LucidaSansDemiBold.ttf
    C:\Program Files\Java\j2re1.4.2_03\lib\fonts\LucidaSansRegular.ttf
    C:\Program Files\Java\j2re1.4.2_03\lib\fonts\LucidaTypewriterBold.ttf
    C:\Program Files\Java\j2re1.4.2_03\lib\fonts\LucidaTypewriterRegular.ttf
    C:\Program Files\Java\j2re1.4.2_03\lib\i386\jvm.cfg
    C:\Program Files\Java\j2re1.4.2_03\lib\im\indicim.jar
    C:\Program Files\Java\j2re1.4.2_03\lib\im\thaiim.jar
    C:\Program Files\Java\j2re1.4.2_03\lib\images\cursors\cursors.properties
    C:\Program Files\Java\j2re1.4.2_03\lib\images\cursors\invalid32x32.gif
    C:\Program Files\Java\j2re1.4.2_03\lib\images\cursors\win32_CopyDrop32x32.gif
    C:\Program Files\Java\j2re1.4.2_03\lib\images\cursors\win32_CopyNoDrop32x32.gif
    C:\Program Files\Java\j2re1.4.2_03\lib\images\cursors\win32_LinkDrop32x32.gif
    C:\Program Files\Java\j2re1.4.2_03\lib\images\cursors\win32_LinkNoDrop32x32.gif
    C:\Program Files\Java\j2re1.4.2_03\lib\images\cursors\win32_MoveDrop32x32.gif
    C:\Program Files\Java\j2re1.4.2_03\lib\images\cursors\win32_MoveNoDrop32x32.gif
    C:\Program Files\Java\j2re1.4.2_03\lib\jce.jar
    C:\Program Files\Java\j2re1.4.2_03\lib\jsse.jar
    C:\Program Files\Java\j2re1.4.2_03\lib\jvm.hprof.txt
    C:\Program Files\Java\j2re1.4.2_03\lib\jvm.jcov.txt
    C:\Program Files\Java\j2re1.4.2_03\lib\logging.properties
    C:\Program Files\Java\j2re1.4.2_03\lib\plugin.jar
    C:\Program Files\Java\j2re1.4.2_03\lib\psfont.properties.ja
    C:\Program Files\Java\j2re1.4.2_03\lib\psfontj2d.properties
    C:\Program Files\Java\j2re1.4.2_03\lib\rt.jar
    C:\Program Files\Java\j2re1.4.2_03\lib\security\cacerts
    C:\Program Files\Java\j2re1.4.2_03\lib\security\java.policy
    C:\Program Files\Java\j2re1.4.2_03\lib\security\java.security
    C:\Program Files\Java\j2re1.4.2_03\lib\security\local_policy.jar
    C:\Program Files\Java\j2re1.4.2_03\lib\security\US_export_policy.jar
    C:\Program Files\Java\j2re1.4.2_03\lib\sunrsasign.jar
    C:\Program Files\Java\j2re1.4.2_03\lib\tzmappings
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Africa\Abidjan
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Africa\Accra
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Africa\Addis_Ababa
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Africa\Algiers
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Africa\Asmera
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Africa\Bamako
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Africa\Bangui
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Africa\Banjul
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Africa\Bissau
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Africa\Blantyre
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Africa\Brazzaville
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Africa\Bujumbura
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Africa\Cairo
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Africa\Casablanca
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Africa\Ceuta
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Africa\Conakry
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Africa\Dakar
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Africa\Dar_es_Salaam
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Africa\Djibouti
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Africa\Douala
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Africa\El_Aaiun
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Africa\Freetown
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Africa\Gaborone
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Africa\Harare
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Africa\Johannesburg
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Africa\Kampala
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Africa\Khartoum
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Africa\Kigali
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Africa\Kinshasa
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Africa\Lagos
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Africa\Libreville
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Africa\Lome
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Africa\Luanda
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Africa\Lubumbashi
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Africa\Lusaka
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Africa\Malabo
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Africa\Maputo
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Africa\Maseru
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Africa\Mbabane
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Africa\Mogadishu
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Africa\Monrovia
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Africa\Nairobi
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Africa\Ndjamena
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Africa\Niamey
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Africa\Nouakchott
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Africa\Ouagadougou
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Africa\Porto-Novo
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Africa\Sao_Tome
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Africa\Timbuktu
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Africa\Tripoli
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Africa\Tunis
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Africa\Windhoek
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Adak
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Anchorage
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Anguilla
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Antigua
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Araguaina
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Aruba
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Asuncion
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Barbados
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Belem
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Belize
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Boa_Vista
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Bogota
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Boise
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Buenos_Aires
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Cambridge_Bay
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Cancun
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Caracas
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Catamarca
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Cayenne
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Cayman
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Chicago
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Chihuahua
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Cordoba
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Costa_Rica
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Cuiaba
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Curacao
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Danmarkshavn
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Dawson
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Dawson_Creek
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Denver
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Detroit
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Dominica
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Edmonton
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Eirunepe
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\El_Salvador
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Fortaleza
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Glace_Bay
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Godthab
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Goose_Bay
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Grand_Turk
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Grenada
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Guadeloupe
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Guatemala
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Guayaquil
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Guyana
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Halifax
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Havana
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Hermosillo
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Indiana\Knox
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Indiana\Marengo
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Indiana\Vevay
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Indianapolis
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Inuvik
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Iqaluit
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Jamaica
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Jujuy
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Juneau
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Kentucky\Monticello
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\La_Paz
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Lima
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Los_Angeles
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Louisville
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Maceio
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Managua
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Manaus
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Martinique
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Mazatlan
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Mendoza
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Menominee
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Merida
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Mexico_City
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Miquelon
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Monterrey
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Montevideo
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Montreal
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Montserrat
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Nassau
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\New_York
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Nipigon
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Nome
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Noronha
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\North_Dakota\Center
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Panama
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Pangnirtung
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Paramaribo
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Phoenix
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Port-au-Prince
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Port_of_Spain
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Porto_Velho
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Puerto_Rico
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Rainy_River
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Rankin_Inlet
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Recife
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Regina
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Rio_Branco
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Santiago
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Santo_Domingo
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Sao_Paulo
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Scoresbysund
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\St_Johns
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\St_Kitts
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\St_Lucia
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\St_Thomas
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\St_Vincent
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Swift_Current
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Tegucigalpa
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Thule
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Thunder_Bay
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Tijuana
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Tortola
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Vancouver
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Whitehorse
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Winnipeg
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Yakutat
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\America\Yellowknife
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Antarctica\Casey
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Antarctica\Davis
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Antarctica\DumontDUrville
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Antarctica\Mawson
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Antarctica\McMurdo
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Antarctica\Palmer
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Antarctica\Rothera
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Antarctica\Syowa
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Antarctica\Vostok
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Aden
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Almaty
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Amman
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Anadyr
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Aqtau
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Aqtobe
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Ashgabat
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Baghdad
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Bahrain
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Baku
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Bangkok
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Beirut
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Bishkek
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Brunei
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Calcutta
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Choibalsan
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Chongqing
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Colombo
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Damascus
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Dhaka
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Dili
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Dubai
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Dushanbe
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Gaza
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Harbin
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Hong_Kong
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Hovd
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Irkutsk
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Jakarta
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Jayapura
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Jerusalem
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Kabul
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Kamchatka
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Karachi
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Kashgar
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Katmandu
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Krasnoyarsk
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Kuala_Lumpur
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Kuching
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Kuwait
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Macau
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Magadan
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Makassar
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Manila
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Muscat
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Nicosia
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Novosibirsk
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Omsk
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Oral
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Phnom_Penh
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Pontianak
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Pyongyang
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Qatar
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Qyzylorda
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Rangoon
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Riyadh
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Riyadh87
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Riyadh88
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Riyadh89
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Saigon
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Sakhalin
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Samarkand
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Seoul
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Shanghai
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Singapore
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Taipei
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Tashkent
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Tbilisi
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Tehran
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Thimphu
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Tokyo
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Ulaanbaatar
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Urumqi
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Vientiane
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Vladivostok
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Yakutsk
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Yekaterinburg
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Asia\Yerevan
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Atlantic\Azores
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Atlantic\Bermuda
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Atlantic\Canary
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Atlantic\Cape_Verde
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Atlantic\Faeroe
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Atlantic\Madeira
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Atlantic\Reykjavik
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Atlantic\South_Georgia
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Atlantic\St_Helena
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Atlantic\Stanley
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Australia\Adelaide
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Australia\Brisbane
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Australia\Broken_Hill
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Australia\Darwin
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Australia\Hobart
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Australia\Lindeman
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Australia\Lord_Howe
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Australia\Melbourne
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Australia\Perth
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Australia\Sydney
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\CET
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\EET
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Etc\GMT-1
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Etc\GMT-10
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Etc\GMT-11
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Etc\GMT-12
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Etc\GMT-13
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Etc\GMT-14
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Etc\GMT-2
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Etc\GMT-3
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Etc\GMT-4
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Etc\GMT-5
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Etc\GMT-6
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Etc\GMT-7
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Etc\GMT-8
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Etc\GMT-9
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Etc\GMT
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Etc\UCT
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Etc\UTC
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Europe\Amsterdam
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Europe\Andorra
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Europe\Athens
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Europe\Belfast
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Europe\Belgrade
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Europe\Berlin
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Europe\Brussels
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Europe\Bucharest
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Europe\Budapest
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Europe\Chisinau
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Europe\Copenhagen
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Europe\Dublin
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Europe\Gibraltar
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Europe\Helsinki
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Europe\Istanbul
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Europe\Kaliningrad
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Europe\Kiev
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Europe\Lisbon
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Europe\London
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Europe\Luxembourg
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Europe\Madrid
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Europe\Malta
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Europe\Minsk
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Europe\Monaco
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Europe\Moscow
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Europe\Oslo
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Europe\Paris
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Europe\Prague
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Europe\Riga
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Europe\Rome
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Europe\Samara
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Europe\Simferopol
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Europe\Sofia
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Europe\Stockholm
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Europe\Tallinn
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Europe\Tirane
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Europe\Uzhgorod
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Europe\Vaduz
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Europe\Warsaw
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Europe\Vienna
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Europe\Vilnius
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Europe\Zaporozhye
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Europe\Zurich
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\GMT
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Indian\Antananarivo
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Indian\Chagos
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Indian\Christmas
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Indian\Cocos
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Indian\Comoro
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Indian\Kerguelen
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Indian\Mahe
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Indian\Maldives
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Indian\Mauritius
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Indian\Mayotte
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Indian\Reunion
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\MET
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Pacific\Apia
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Pacific\Auckland
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Pacific\Chatham
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Pacific\Easter
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Pacific\Efate
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Pacific\Enderbury
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Pacific\Fakaofo
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Pacific\Fiji
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Pacific\Funafuti
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Pacific\Galapagos
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Pacific\Gambier
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Pacific\Guadalcanal
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Pacific\Guam
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Pacific\Honolulu
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Pacific\Johnston
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Pacific\Kiritimati
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Pacific\Kosrae
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Pacific\Kwajalein
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Pacific\Majuro
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Pacific\Marquesas
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Pacific\Midway
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Pacific\Nauru
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Pacific\Niue
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Pacific\Norfolk
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Pacific\Noumea
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Pacific\Pago_Pago
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Pacific\Palau
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Pacific\Pitcairn
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Pacific\Ponape
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Pacific\Port_Moresby
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Pacific\Rarotonga
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Pacific\Saipan
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Pacific\Tahiti
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Pacific\Tarawa
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Pacific\Tongatapu
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Pacific\Truk
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Pacific\Wake
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Pacific\Wallis
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\Pacific\Yap
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\WET
    C:\Program Files\Java\j2re1.4.2_03\lib\zi\ZoneInfoMappings
    C:\Program Files\Java\j2re1.4.2_03\LICENSE
    C:\Program Files\Java\j2re1.4.2_03\LICENSE.rtf
    C:\Program Files\Java\j2re1.4.2_03\LICENSE_de.rtf
    C:\Program Files\Java\j2re1.4.2_03\LICENSE_es.rtf
    C:\Program Files\Java\j2re1.4.2_03\LICENSE_fr.rtf
    C:\Program Files\Java\j2re1.4.2_03\LICENSE_it.rtf
    C:\Program Files\Java\j2re1.4.2_03\LICENSE_ja.rtf
    C:\Program Files\Java\j2re1.4.2_03\LICENSE_ko.rtf
    C:\Program Files\Java\j2re1.4.2_03\LICENSE_sv.rtf
    C:\Program Files\Java\j2re1.4.2_03\LICENSE_zh_CN.rtf
    C:\Program Files\Java\j2re1.4.2_03\LICENSE_zh_TW.rtf
    C:\Program Files\Java\j2re1.4.2_03\README.txt
    C:\Program Files\Java\j2re1.4.2_03\THIRDPARTYLICENSEREADME.txt
    C:\Program Files\Java\j2re1.4.2_03\Welcome.html
    C:\Program Files\Norton 360
    C:\Program Files\Norton 360\url.txt
    C:\Program Files\Norton 360\urlhistory.txt
    C:\Program Files\Uninstall Ask Toolbar.dll\

    .
    ((((( Tiedostot, jotka on luotu seuraavalla aikav„lill„: 2008-07-27 to 2008-08-27 )))))))))))))))))
    .

    2008-08-27 13:58 . 2008-06-14 20:59 272,128 --------- C:\WINDOWS\system32\drivers\bthport.sys
    2008-08-27 13:58 . 2008-06-14 20:59 272,128 --------- C:\WINDOWS\system32\dllcache\bthport.sys
    2008-08-27 13:50 . 2008-05-01 17:32 331,776 --------- C:\WINDOWS\system32\dllcache\msadce.dll
    2008-08-27 12:30 . 2008-08-27 12:30 <KANSIO> d-------- C:\WINDOWS\ERUNT
    2008-08-27 11:57 . 2008-08-27 11:57 61,440 --a------ C:\WINDOWS\system32\drivers\jmfyfhb.sys
    2008-08-27 01:51 . 2008-08-27 01:51 <KANSIO> d-------- C:\Documents and Settings\Outi Röksä
    2008-08-27 01:51 . <KANSIO> C:\Documents and Settings\Outi R÷ksõ\Local Settings
    2008-08-27 01:51 . <KANSIO> C:\Documents and Settings\Outi R÷ksõ\Local Settings
    2008-08-27 01:51 . 2008-08-27 01:51 <KANSIO> d-------- C:\Documents and Settings\Järjestelmänvalvoja
    2008-08-27 01:51 . <KANSIO> C:\Documents and Settings\Jõrjestelmõnvalvoja\Local Settings
    2008-08-27 01:04 . 2008-08-17 15:01 17,144 --a------ C:\WINDOWS\system32\drivers\mbam.sys
    2008-08-27 01:03 . 2008-08-27 01:05 <KANSIO> d-------- C:\Program Files\Malwarebytes' Anti-Malware
    2008-08-27 01:03 . 2008-08-27 01:03 <KANSIO> d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes
    2008-08-27 01:03 . 2008-08-17 15:01 38,472 --a------ C:\WINDOWS\system32\drivers\mbamswissarmy.sys
    2008-08-26 23:06 . 2008-08-26 23:06 <KANSIO> d-------- C:\Program Files\Trend Micro
    2008-08-26 22:06 . 2008-08-26 22:09 <KANSIO> d-------- C:\Documents and Settings\All Users\Application Data\PC Suite
    2008-08-26 22:04 . 2008-08-26 22:04 <KANSIO> d-------- C:\Program Files\Common Files\PCSuite
    2008-08-26 22:04 . 2008-08-26 22:04 <KANSIO> d-------- C:\Program Files\Common Files\Nokia
    2008-08-26 22:03 . 2008-08-26 22:03 <KANSIO> d-------- C:\Program Files\DIFX
    2008-08-26 22:01 . 2008-08-26 22:01 <KANSIO> d-------- C:\Program Files\PC Connectivity Solution
    2008-08-26 22:00 . 2007-02-22 11:15 137,216 --a------ C:\WINDOWS\system32\drivers\nmwcd.sys
    2008-08-26 22:00 . 2007-02-22 11:15 90,624 --a------ C:\WINDOWS\system32\nmwcdcls.dll
    2008-08-26 22:00 . 2007-02-22 11:15 65,536 --a------ C:\WINDOWS\system32\nmwcdcocls.dll
    2008-08-26 22:00 . 2007-02-22 11:15 12,288 --a------ C:\WINDOWS\system32\drivers\nmwcdcm.sys
    2008-08-26 22:00 . 2007-02-22 11:15 12,288 --a------ C:\WINDOWS\system32\drivers\nmwcdcj.sys
    2008-08-26 22:00 . 2007-02-22 11:15 8,320 --a------ C:\WINDOWS\system32\drivers\nmwcdc.sys
    2008-08-26 21:59 . 2008-08-26 22:04 <KANSIO> d-------- C:\Program Files\Nokia
    2008-08-26 21:55 . 2008-08-26 21:55 <KANSIO> d-------- C:\Documents and Settings\All Users\Application Data\Installations
    2008-08-26 20:45 . 2008-08-26 21:14 <KANSIO> d---s---- C:\Documents and Settings\J„rjestelm„nvalvoja
    2008-08-24 19:06 . 2008-08-24 19:06 249,592 --a------ C:\WINDOWS\system32\cssdll32.dll
    2008-08-24 19:05 . 2008-08-26 21:03 <KANSIO> d-------- C:\Documents and Settings\All Users\Application Data\comodo
    2008-08-24 19:05 . 2008-08-24 19:04 143,104 --a------ C:\WINDOWS\system32\guard32.dll
    2008-08-24 19:05 . 2008-08-24 19:04 87,056 --a------ C:\WINDOWS\system32\drivers\cmdguard.sys
    2008-08-24 19:05 . 2008-08-24 19:04 24,208 --a------ C:\WINDOWS\system32\drivers\cmdhlp.sys
    2008-08-24 19:04 . 2008-08-27 14:41 <KANSIO> d-------- C:\Program Files\COMODO
    2008-08-24 18:45 . 2008-08-24 18:45 <KANSIO> d-------- C:\Program Files\Alwil Software
    2008-08-19 23:01 . 2008-08-19 23:01 <KANSIO> d-------- C:\Documents and Settings\Vieras\Application Data\Sony Corporation
    2008-08-08 20:10 . 2008-08-08 20:10 <KANSIO> d-------- C:\Program Files\CCleaner
    2008-08-08 20:08 . 2008-08-08 20:08 <KANSIO> d-------- C:\Program Files\inKline Global
    2008-08-08 19:59 . 2008-08-08 19:59 <KANSIO> d-------- C:\Documents and Settings\All Users\Application Data\Grisoft

    .
    (((((((((((((((((((((((((((((((((((( Find3M-raportti ))))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2008-08-27 14:32 --------- d-----w C:\Program Files\Common Files\Symantec Shared
    2008-08-27 14:32 --------- d-----w C:\Documents and Settings\All Users\Application Data\Symantec
    2008-08-24 15:44 --------- d-----w C:\Program Files\WinAce
    2008-08-08 17:22 --------- d-----w C:\Program Files\Hardwood Solitaire III
    2008-08-08 17:08 --------- d--h--w C:\Program Files\InstallShield Installation Information
    2008-07-18 19:10 94,920 ----a-w C:\WINDOWS\system32\dllcache\cdm.dll
    2008-07-18 19:10 94,920 ----a-w C:\WINDOWS\system32\cdm.dll
    2008-07-18 19:10 53,448 ----a-w C:\WINDOWS\system32\wuauclt.exe
    2008-07-18 19:10 53,448 ----a-w C:\WINDOWS\system32\dllcache\wuauclt.exe
    2008-07-18 19:10 45,768 ----a-w C:\WINDOWS\system32\wups2.dll
    2008-07-18 19:10 36,552 ----a-w C:\WINDOWS\system32\wups.dll
    2008-07-18 19:10 36,552 ----a-w C:\WINDOWS\system32\dllcache\wups.dll
    2008-07-18 19:09 563,912 ----a-w C:\WINDOWS\system32\wuapi.dll
    2008-07-18 19:09 563,912 ----a-w C:\WINDOWS\system32\dllcache\wuapi.dll
    2008-07-18 19:09 325,832 ----a-w C:\WINDOWS\system32\wucltui.dll
    2008-07-18 19:09 325,832 ----a-w C:\WINDOWS\system32\dllcache\wucltui.dll
    2008-07-18 19:09 205,000 ----a-w C:\WINDOWS\system32\wuweb.dll
    2008-07-18 19:09 205,000 ----a-w C:\WINDOWS\system32\dllcache\wuweb.dll
    2008-07-18 19:09 1,811,656 ----a-w C:\WINDOWS\system32\wuaueng.dll
    2008-07-18 19:09 1,811,656 ----a-w C:\WINDOWS\system32\dllcache\wuaueng.dll
    2008-07-18 19:07 270,880 ----a-w C:\WINDOWS\system32\mucltui.dll
    2008-07-18 19:07 210,976 ----a-w C:\WINDOWS\system32\muweb.dll
    2008-07-18 18:39 586,752 ----a-w C:\WINDOWS\WLXPGSS.SCR
    2008-07-07 20:31 253,952 ----a-w C:\WINDOWS\system32\es.dll
    2008-07-07 20:31 253,952 ------w C:\WINDOWS\system32\dllcache\es.dll
    2008-06-24 16:23 74,240 ----a-w C:\WINDOWS\system32\mscms.dll
    2008-06-24 16:23 74,240 ------w C:\WINDOWS\system32\dllcache\mscms.dll
    2008-06-24 07:29 3,592,192 ----a-w C:\WINDOWS\system32\dllcache\mshtml.dll
    2008-06-23 09:21 70,656 ------w C:\WINDOWS\system32\dllcache\ie4uinit.exe
    2008-06-23 09:21 625,664 ------w C:\WINDOWS\system32\dllcache\iexplore.exe
    2008-06-23 09:20 13,824 ------w C:\WINDOWS\system32\dllcache\ieudinit.exe
    2008-06-21 05:23 161,792 ------w C:\WINDOWS\system32\dllcache\ieakui.dll
    2008-06-20 17:41 246,784 ----a-w C:\WINDOWS\system32\mswsock.dll
    2008-06-20 17:41 246,784 ------w C:\WINDOWS\system32\dllcache\mswsock.dll
    2008-06-20 17:41 148,992 ----a-w C:\WINDOWS\system32\dllcache\dnsapi.dll
    2008-06-20 10:45 360,320 ----a-w C:\WINDOWS\system32\dllcache\tcpip.sys
    2008-06-20 10:44 138,368 ------w C:\WINDOWS\system32\dllcache\afd.sys
    2008-06-20 09:52 225,920 ----a-w C:\WINDOWS\system32\dllcache\tcpip6.sys
    2008-05-30 04:05 370,176 ------w C:\WINDOWS\system32\byXRlMeE.dll
    2008-05-29 19:09 106,496 ----a-w C:\f-sdbot.exe
    .

    ((((((((((((((((((((((((((((( snapshot_2008-08-27_20.21.05.49 )))))))))))))))))))))))))))))))))))))))))
    .
    + 2008-08-27 19:21:14 16,384 ----atw C:\WINDOWS\Temp\Perflib_Perfdata_614.dat
    .
    (((((((((((((((((((((((((((((( Rekisterin k„ynnistyskohteet )))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Huom* Tyhji„ arvoja ja laillisia oletusarvoja ei n„ytet„
    REGEDIT4

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-09-15 11:00 15360]
    "MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 12:34 5724184]
    "swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-07-30 23:28 68856]
    "Skype"="C:\Program Files\Skype\Phone\Skype.exe" [2007-02-09 17:00 25388584]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "UpdateManager"="C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" [2003-08-19 02:01 110592]
    "SynTPLpr"="C:\Program Files\Synaptics\SynTP\SynTPLpr.exe" [2004-05-26 20:15 98304]
    "SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2004-05-26 20:15 536576]
    "HPHUPD05"="c:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe" [2003-05-22 21:03 49152]
    "HPHmon05"="C:\WINDOWS\system32\hphmon05.exe" [2003-05-22 20:56 483328]
    "Cpqset"="C:\Program Files\HPQ\Default Settings\cpqset.exe" [2004-04-30 11:32 208958]
    "eabconfg.cpl"="C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe" [2004-07-30 09:33 286720]
    "TkBellExe"="C:\Program Files\K-Lite Codec Pack\Real\Update_OB\realsched.exe" [2007-06-03 19:57 151597]
    "MMTray"="C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe" [2006-01-17 13:03 135168]
    "mmtask"="C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe" [2006-01-17 13:03 53248]
    "IgfxTray"="C:\WINDOWS\system32\igfxtray.exe" [2003-10-30 11:46 155648]
    "HotKeysCmds"="C:\WINDOWS\system32\hkcmd.exe" [2003-10-30 11:33 118784]
    "dla"="C:\WINDOWS\system32\dla\tfswctrl.exe" [2004-03-25 02:04 122939]
    "COMODO Firewall Pro"="C:\Program Files\COMODO\Firewall\cfp.exe" [2008-08-24 19:04 1655552]
    "PCSuiteTrayApplication"="C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe" [2007-06-18 15:10 271360]
    "Logitech Hardware Abstraction Layer"="KHALMNPR.EXE" [2004-06-08 13:31 29696 C:\WINDOWS\KHALMNPR.Exe]

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
    "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-09-15 11:00 15360]
    "Nokia.PCSync"="C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" [2007-06-19 10:17 1241088]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
    "VIDC.X264"= x264vfw.dll

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
    SecurityProviders msapsspc.dllschannel.dlldigest.dllmsnsspc.dll

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
    "DisableMonitoring"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
    "DisableMonitoring"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
    "DisableMonitoring"=dword:00000001

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
    "EnableFirewall"= 0 (0x0)

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "%windir%\\system32\\sessmgr.exe"=
    "C:\\Program Files\\Messenger\\msmsgs.exe"=
    "C:\\Program Files\\Skype\\Phone\\Skype.exe"=
    "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
    "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=

    R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-07-19 17:35]
    R1 cmdGuard;COMODO Firewall Pro Sandbox Driver;C:\WINDOWS\system32\DRIVERS\cmdguard.sys [2008-08-24 19:04]
    R1 cmdHlp;COMODO Firewall Pro Helper Driver;C:\WINDOWS\system32\DRIVERS\cmdhlp.sys [2008-08-24 19:04]
    R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-07-19 17:37]
    S3 StickCap;Digital TV DVB-T USB Stick adapter service;C:\WINDOWS\system32\Drivers\stickcap.sys []
    S3 stickload;Digital TV stick firmware loader service;C:\WINDOWS\system32\DRIVERS\stickload.sys []
    .
    'Ajoitetut teht„v„t'-kansion sis„lt”
    .
    - - - - ORPHANS REMOVED - - - -

    HKLM-Run-SunJavaUpdateSched - C:\Program Files\Java\j2re1.4.2_03\bin\jusched.exe



    **************************************************************************

    catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2008-08-27 22:23:15
    Windows 5.1.2600 Service Pack 2 NTFS

    scanning hidden processes ...

    scanning hidden autostart entries ...

    HKLM\Software\Microsoft\Windows\CurrentVersion\Run
    Cpqset = C:\Program Files\HPQ\Default Settings\cpqset.exe????????9?0?1?1??`???? ???B???????????????B? ??????

    scanning hidden files ...

    scan completed successfully
    hidden files: 0

    **************************************************************************
    .
    --------------------- DLLs Loaded Under Running Processes ---------------------

    PROCESS: C:\WINDOWS\explorer.exe
    -> C:\Program Files\Logitech\SetPoint\lgscroll.dll
    .
    ------------------------ Other Running Processes ------------------------
    .
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\Program Files\COMODO\Firewall\cmdagent.exe
    C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
    C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
    C:\Program Files\Logitech\SetPoint\KEM.exe
    C:\Program Files\Logitech\SetPoint\KHALMNPR.exe
    C:\Program Files\Hewlett-Packard\Digital Imaging\Product Assistant\bin\hprblog.exe
    C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqimzone.exe
    C:\Program Files\Skype\Plugin Manager\skypePM.exe
    C:\WINDOWS\system32\imapi.exe
    .
    **************************************************************************
    .
    Completion time: 2008-08-27 22:37:25 - machine was rebooted
    ComboFix-quarantined-files.txt 2008-08-27 19:36:51
    ComboFix2.txt 2008-08-27 17:22:02
    ComboFix3.txt 2008-08-26 22:50:27

    Pre-Run: 9,016,242,176 tavua vapaana
    Post-Run: 9,043,886,080 tavua vapaana

    772 --- E O F --- 2008-08-27 11:17:43
     
    teamsfv, 27.08.2008
    #22
  4. Hujo

    Hujo Guest

    Avaa Muistio ja kopioi/liitä quoteboxin sisältö sinne:

    Tallenna se nimellä CFScript.txt

    Sitten raahaa CFScript ComboFix.exeen kuten alla.

    [​IMG]

    Käynnistä tietokone uudelleen pyydettäessä ja lähetä combofix.txt-tiedoston sisältö tänne.
     
    Hujo, 27.08.2008
    #23
  5. teamsfv

    teamsfv Member

    Liittynyt:
    15.12.2005
    Viestejä:
    42
    Kiitokset:
    0
    Pisteet:
    16
    Ja lisää pukkaa :)

    ComboFix 08-08-26.01 - Outi Röksä 2008-08-27 23:58:04.4 - NTFSx86
    Microsoft Windows XP Home Edition 5.1.2600.2.1252.1.1035.18.121 [GMT 3:00]
    Running from: C:\Documents and Settings\Outi Röksä\Työpöytä\ComboFix.exe
    Command switches used :: C:\Documents and Settings\Outi Röksä\Työpöytä\CFScript.txt
    * Created a new restore point

    WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
    .

    (((((((((((((((((((((((((((((((((((((( Muut poistot ))))))))))))))))))))))))))))))))))))))))))))))))))))))))
    .

    C:\Documents and Settings\All Users\Application Data\Symantec
    C:\f-sdbot.exe\
    C:\Program Files\Common Files\Symantec Shared
    C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcrst.dll
    C:\Program Files\Common Files\Symantec Shared\Security Center\SymSCUI.ex^

    .
    ((((( Tiedostot, jotka on luotu seuraavalla aikav„lill„: 2008-07-27 to 2008-08-27 )))))))))))))))))
    .

    2008-08-27 13:58 . 2008-06-14 20:59 272,128 --------- C:\WINDOWS\system32\drivers\bthport.sys
    2008-08-27 13:58 . 2008-06-14 20:59 272,128 --------- C:\WINDOWS\system32\dllcache\bthport.sys
    2008-08-27 13:50 . 2008-05-01 17:32 331,776 --------- C:\WINDOWS\system32\dllcache\msadce.dll
    2008-08-27 12:30 . 2008-08-27 12:30 <KANSIO> d-------- C:\WINDOWS\ERUNT
    2008-08-27 11:57 . 2008-08-27 11:57 61,440 --a------ C:\WINDOWS\system32\drivers\jmfyfhb.sys
    2008-08-27 01:51 . 2008-08-27 01:51 <KANSIO> d-------- C:\Documents and Settings\Outi Röksä
    2008-08-27 01:51 . <KANSIO> C:\Documents and Settings\Outi R÷ksõ\Local Settings
    2008-08-27 01:51 . <KANSIO> C:\Documents and Settings\Outi R÷ksõ\Local Settings
    2008-08-27 01:51 . 2008-08-27 01:51 <KANSIO> d-------- C:\Documents and Settings\Järjestelmänvalvoja
    2008-08-27 01:51 . <KANSIO> C:\Documents and Settings\Jõrjestelmõnvalvoja\Local Settings
    2008-08-27 01:04 . 2008-08-17 15:01 17,144 --a------ C:\WINDOWS\system32\drivers\mbam.sys
    2008-08-27 01:03 . 2008-08-27 01:05 <KANSIO> d-------- C:\Program Files\Malwarebytes' Anti-Malware
    2008-08-27 01:03 . 2008-08-27 01:03 <KANSIO> d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes
    2008-08-27 01:03 . 2008-08-17 15:01 38,472 --a------ C:\WINDOWS\system32\drivers\mbamswissarmy.sys
    2008-08-26 23:06 . 2008-08-26 23:06 <KANSIO> d-------- C:\Program Files\Trend Micro
    2008-08-26 22:06 . 2008-08-26 22:09 <KANSIO> d-------- C:\Documents and Settings\All Users\Application Data\PC Suite
    2008-08-26 22:04 . 2008-08-26 22:04 <KANSIO> d-------- C:\Program Files\Common Files\PCSuite
    2008-08-26 22:04 . 2008-08-26 22:04 <KANSIO> d-------- C:\Program Files\Common Files\Nokia
    2008-08-26 22:03 . 2008-08-26 22:03 <KANSIO> d-------- C:\Program Files\DIFX
    2008-08-26 22:01 . 2008-08-26 22:01 <KANSIO> d-------- C:\Program Files\PC Connectivity Solution
    2008-08-26 22:00 . 2007-02-22 11:15 137,216 --a------ C:\WINDOWS\system32\drivers\nmwcd.sys
    2008-08-26 22:00 . 2007-02-22 11:15 90,624 --a------ C:\WINDOWS\system32\nmwcdcls.dll
    2008-08-26 22:00 . 2007-02-22 11:15 65,536 --a------ C:\WINDOWS\system32\nmwcdcocls.dll
    2008-08-26 22:00 . 2007-02-22 11:15 12,288 --a------ C:\WINDOWS\system32\drivers\nmwcdcm.sys
    2008-08-26 22:00 . 2007-02-22 11:15 12,288 --a------ C:\WINDOWS\system32\drivers\nmwcdcj.sys
    2008-08-26 22:00 . 2007-02-22 11:15 8,320 --a------ C:\WINDOWS\system32\drivers\nmwcdc.sys
    2008-08-26 21:59 . 2008-08-26 22:04 <KANSIO> d-------- C:\Program Files\Nokia
    2008-08-26 21:55 . 2008-08-26 21:55 <KANSIO> d-------- C:\Documents and Settings\All Users\Application Data\Installations
    2008-08-26 20:45 . 2008-08-26 21:14 <KANSIO> d---s---- C:\Documents and Settings\J„rjestelm„nvalvoja
    2008-08-24 19:06 . 2008-08-24 19:06 249,592 --a------ C:\WINDOWS\system32\cssdll32.dll
    2008-08-24 19:05 . 2008-08-26 21:03 <KANSIO> d-------- C:\Documents and Settings\All Users\Application Data\comodo
    2008-08-24 19:05 . 2008-08-24 19:04 143,104 --a------ C:\WINDOWS\system32\guard32.dll
    2008-08-24 19:05 . 2008-08-24 19:04 87,056 --a------ C:\WINDOWS\system32\drivers\cmdguard.sys
    2008-08-24 19:05 . 2008-08-24 19:04 24,208 --a------ C:\WINDOWS\system32\drivers\cmdhlp.sys
    2008-08-24 19:04 . 2008-08-27 14:41 <KANSIO> d-------- C:\Program Files\COMODO
    2008-08-24 18:45 . 2008-08-24 18:45 <KANSIO> d-------- C:\Program Files\Alwil Software
    2008-08-19 23:01 . 2008-08-19 23:01 <KANSIO> d-------- C:\Documents and Settings\Vieras\Application Data\Sony Corporation
    2008-08-08 20:10 . 2008-08-08 20:10 <KANSIO> d-------- C:\Program Files\CCleaner
    2008-08-08 20:08 . 2008-08-08 20:08 <KANSIO> d-------- C:\Program Files\inKline Global
    2008-08-08 19:59 . 2008-08-08 19:59 <KANSIO> d-------- C:\Documents and Settings\All Users\Application Data\Grisoft

    .
    (((((((((((((((((((((((((((((((((((( Find3M-raportti ))))))))))))))))))))))))))))))))))))))))))))))))))))))
    .
    2008-08-24 15:44 --------- d-----w C:\Program Files\WinAce
    2008-08-08 17:22 --------- d-----w C:\Program Files\Hardwood Solitaire III
    2008-08-08 17:08 --------- d--h--w C:\Program Files\InstallShield Installation Information
    2008-07-18 18:39 586,752 ----a-w C:\WINDOWS\WLXPGSS.SCR
    2008-05-29 19:09 106,496 ----a-w C:\f-sdbot.exe
    .

    ((((((((((((((((((((((((((((( snapshot_2008-08-27_20.21.05.49 )))))))))))))))))))))))))))))))))))))))))
    .
    + 2008-08-27 21:03:21 16,384 ----atw C:\WINDOWS\Temp\Perflib_Perfdata_650.dat
    .
    (((((((((((((((((((((((((((((( Rekisterin k„ynnistyskohteet )))))))))))))))))))))))))))))))))))))))))))))
    .
    .
    *Huom* Tyhji„ arvoja ja laillisia oletusarvoja ei n„ytet„
    REGEDIT4

    [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-09-15 11:00 15360]
    "MsnMsgr"="C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 12:34 5724184]
    "swg"="C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-07-30 23:28 68856]
    "Skype"="C:\Program Files\Skype\Phone\Skype.exe" [2007-02-09 17:00 25388584]

    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "UpdateManager"="C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" [2003-08-19 02:01 110592]
    "SynTPLpr"="C:\Program Files\Synaptics\SynTP\SynTPLpr.exe" [2004-05-26 20:15 98304]
    "SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2004-05-26 20:15 536576]
    "HPHUPD05"="c:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe" [2003-05-22 21:03 49152]
    "HPHmon05"="C:\WINDOWS\system32\hphmon05.exe" [2003-05-22 20:56 483328]
    "Cpqset"="C:\Program Files\HPQ\Default Settings\cpqset.exe" [2004-04-30 11:32 208958]
    "eabconfg.cpl"="C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe" [2004-07-30 09:33 286720]
    "TkBellExe"="C:\Program Files\K-Lite Codec Pack\Real\Update_OB\realsched.exe" [2007-06-03 19:57 151597]
    "MMTray"="C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe" [2006-01-17 13:03 135168]
    "mmtask"="C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe" [2006-01-17 13:03 53248]
    "IgfxTray"="C:\WINDOWS\system32\igfxtray.exe" [2003-10-30 11:46 155648]
    "HotKeysCmds"="C:\WINDOWS\system32\hkcmd.exe" [2003-10-30 11:33 118784]
    "dla"="C:\WINDOWS\system32\dla\tfswctrl.exe" [2004-03-25 02:04 122939]
    "COMODO Firewall Pro"="C:\Program Files\COMODO\Firewall\cfp.exe" [2008-08-24 19:04 1655552]
    "PCSuiteTrayApplication"="C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe" [2007-06-18 15:10 271360]
    "Logitech Hardware Abstraction Layer"="KHALMNPR.EXE" [2004-06-08 13:31 29696 C:\WINDOWS\KHALMNPR.Exe]

    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
    "CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2004-09-15 11:00 15360]
    "Nokia.PCSync"="C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" [2007-06-19 10:17 1241088]

    [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
    "VIDC.X264"= x264vfw.dll

    [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
    SecurityProviders msapsspc.dllschannel.dlldigest.dllmsnsspc.dll

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring]
    "DisableMonitoring"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecAntiVirus]
    "DisableMonitoring"=dword:00000001

    [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\SymantecFirewall]
    "DisableMonitoring"=dword:00000001

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
    "EnableFirewall"= 0 (0x0)

    [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
    "%windir%\\system32\\sessmgr.exe"=
    "C:\\Program Files\\Messenger\\msmsgs.exe"=
    "C:\\Program Files\\Skype\\Phone\\Skype.exe"=
    "C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
    "C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=

    R1 aswSP;avast! Self Protection;C:\WINDOWS\system32\drivers\aswSP.sys [2008-07-19 17:35]
    R1 cmdGuard;COMODO Firewall Pro Sandbox Driver;C:\WINDOWS\system32\DRIVERS\cmdguard.sys [2008-08-24 19:04]
    R1 cmdHlp;COMODO Firewall Pro Helper Driver;C:\WINDOWS\system32\DRIVERS\cmdhlp.sys [2008-08-24 19:04]
    R2 aswFsBlk;aswFsBlk;C:\WINDOWS\system32\DRIVERS\aswFsBlk.sys [2008-07-19 17:37]
    S3 StickCap;Digital TV DVB-T USB Stick adapter service;C:\WINDOWS\system32\Drivers\stickcap.sys []
    S3 stickload;Digital TV stick firmware loader service;C:\WINDOWS\system32\DRIVERS\stickload.sys []
    .
    'Ajoitetut teht„v„t'-kansion sis„lt”
    .

    **************************************************************************

    catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
    Rootkit scan 2008-08-28 00:06:51
    Windows 5.1.2600 Service Pack 2 NTFS

    scanning hidden processes ...

    scanning hidden autostart entries ...

    HKLM\Software\Microsoft\Windows\CurrentVersion\Run
    Cpqset = C:\Program Files\HPQ\Default Settings\cpqset.exe????????9?0?1?1??????? ???B???????????????B? ??????

    scanning hidden files ...

    scan completed successfully
    hidden files: 0

    **************************************************************************
    .
    --------------------- DLLs Loaded Under Running Processes ---------------------

    PROCESS: C:\WINDOWS\explorer.exe
    -> C:\Program Files\Logitech\SetPoint\lgscroll.dll
    .
    ------------------------ Other Running Processes ------------------------
    .
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\Program Files\COMODO\Firewall\cmdagent.exe
    C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
    C:\Program Files\Logitech\SetPoint\KEM.exe
    C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
    C:\Program Files\Logitech\SetPoint\KHALMNPR.exe
    C:\Program Files\Hewlett-Packard\Digital Imaging\Product Assistant\bin\hprblog.exe
    C:\WINDOWS\system32\WudfHost.exe
    C:\Program Files\Skype\Plugin Manager\skypePM.exe
    C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqimzone.exe
    .
    **************************************************************************
    .
    Completion time: 2008-08-28 0:17:39 - machine was rebooted
    ComboFix-quarantined-files.txt 2008-08-27 21:17:08
    ComboFix2.txt 2008-08-27 19:37:26
    ComboFix3.txt 2008-08-27 17:22:02
    ComboFix4.txt 2008-08-26 22:50:27

    Pre-Run: 9,023,365,120 tavua vapaana
    Post-Run: 9,043,505,152 tavua vapaana

    170 --- E O F --- 2008-08-27 11:17:43
     
    teamsfv, 28.08.2008
    #24
  6. Hujo

    Hujo Guest

    no niin mites kone yskii

    ==============

    Lataa OTMoveIt
    OTMoveIt ja tallenna se työpöydällesi.

    Tuplaklikkaa OTMoveIt.exe.
    Klikkaa CleanUp!.
    Valitse Yes kun kysytään "Begin cleanup Process?".
    Jos pyydetään, että saako koneen käynnistää uudeelleen, valitse Yes.OTMoveIt poistaa itsensä kun se on valmis, jos näin ei käy poista se itse.

    HUOM: Jos palomuurisi tai joku muu tietoturvaohjelma varoittaa, että OTMoveIt yrittää päästä nettin, niin anna sen päästä sinne.
     
    Moderaattorin viimeksi muokkaama: 28.08.2008
    Hujo, 28.08.2008
    #25
  7. teamsfv

    teamsfv Member

    Liittynyt:
    15.12.2005
    Viestejä:
    42
    Kiitokset:
    0
    Pisteet:
    16
    Lähtökohtaan nähden todella hyvin, käynnistyy 10 kertaa nopeenpaa ja eikä tee levossa ittekseen töitä :)

    Javan kahvipanua ei oo vielä tulut vastaan, mutta sempä kerkee miettiin myöhemminkin.

    Seuraavaksi vois katsastaa oman koneen, onneksi siinä ei ole näin paljon ongelmia.

    Suur kiitos tästä.
     
    Viimeksi muokattu: 28.08.2008
    teamsfv, 28.08.2008
    #26
  8. Hujo

    Hujo Guest

    Niin tästä lähdet asenteleen sitä javaa

    http://java.sun.com/javase/downloads/index.jsp

    Rullaa alas kohteeseen Java Runtime Environment (JRE) 6 Update 7
    Paina Download
    Laita Platform -kohtaan Windows
    Ruksaa I agree to the Java SE Runtime Environment 6 License Agreement ja paina Continue
    Paina Windows Offline Installationin alapuolella jre-6u4-windows-i586-p.exe

    Tallenna tiedosto vaikka työpöydälle ja asenna se.

    5. Käynnistä kone uudelleen asennuksen jälkeen.
    6. Käynnistyksen jälkeen, mene takaisin Ohjauspaneeliin ja avaa Java asetuksesi (Muita Ohjauspaneelin asetuksia -> Java kahvikuppi).
    7. General-välilehdellä klikkaa Settings. Vedä liukusäädintä (Disk Space) pienemmälle.

    (Jotkut javapohjaiset ohjelmat saattavat tarvita enemmän levytilaa.
    Jos huomaat säädön pienentämisen jälkeen koneessa hitautta, siirrä liukusäädintä isommalle).

    8. Klikkaa Delete Files -nappia. Varmista että kaikki kaksi valintaa ovat rastitettuja:
    * Applications and Applets
    * Trace and Log Files

    Ja paina OK -nappia
    Huomaa: Tämä poistaa kaikki ladatut sovellukset ja appletit VÄLIMUISTISTA.

    9. Klikkaa OK "Temporary Files Settings" -ikkunassasi.
    10. Välilehti Update: ota ruksi pois kohdasta Check for Updates automatically
    Valitse Never check
    11. Klikkaa Apply ja OK jättääksesi Java asetusikkunasi.
     
    Hujo, 28.08.2008
    #27
  9. teamsfv

    teamsfv Member

    Liittynyt:
    15.12.2005
    Viestejä:
    42
    Kiitokset:
    0
    Pisteet:
    16
    Nyt on Javan asetukset laitettu kohilleen ja Windows SP3 päivitys asennettu, tässä vielä logi.

    Logfile of Trend Micro HijackThis v2.0.2
    Scan saved at 14:19:19, on 28.8.2008
    Platform: Windows XP SP3 (WinNT 5.01.2600)
    MSIE: Internet Explorer v7.00 (7.00.6000.16705)
    Boot mode: Normal

    Running processes:
    C:\WINDOWS\System32\smss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\services.exe
    C:\WINDOWS\system32\lsass.exe
    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\System32\svchost.exe
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    C:\Program Files\Alwil Software\Avast4\ashServ.exe
    C:\WINDOWS\system32\spoolsv.exe
    C:\Program Files\COMODO\Firewall\cmdagent.exe
    C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
    C:\WINDOWS\system32\svchost.exe
    C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    C:\WINDOWS\system32\wuauclt.exe
    C:\WINDOWS\Explorer.EXE
    C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe
    C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
    C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    C:\WINDOWS\system32\hphmon05.exe
    C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe
    C:\Program Files\K-Lite Codec Pack\Real\Update_OB\realsched.exe
    C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
    C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe
    C:\WINDOWS\system32\igfxtray.exe
    C:\WINDOWS\system32\hkcmd.exe
    C:\WINDOWS\system32\dla\tfswctrl.exe
    C:\Program Files\COMODO\Firewall\cfp.exe
    C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe
    C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
    C:\WINDOWS\system32\ctfmon.exe
    C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe
    C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
    C:\Program Files\Skype\Phone\Skype.exe
    C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
    C:\Program Files\Logitech\SetPoint\KEM.exe
    C:\Program Files\Logitech\SetPoint\KHALMNPR.EXE
    C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqimzone.exe
    C:\Program Files\Hewlett-Packard\Digital Imaging\Product Assistant\bin\hprblog.exe
    C:\Program Files\Skype\Plugin Manager\SkypePM.exe
    C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

    R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
    R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
    R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
    R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.fi;;localhost;<local>
    R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Linkit
    O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
    O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
    O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
    O2 - BHO: Windows Liven kirjautumisapuohjelma - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
    O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar3.dll
    O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Program Files\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll
    O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O3 - Toolbar: Easy-WebPrint - {327C2873-E90D-4c37-AA9D-10AC9BABA46C} - C:\Program Files\Canon\Easy-WebPrint\Toolband.dll
    O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar3.dll
    O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Program Files\Windows Live Toolbar\msntb.dll
    O4 - HKLM\..\Run: [UpdateManager] "C:\Program Files\Common Files\Sonic\Update Manager\sgtray.exe" /r
    O4 - HKLM\..\Run: [SynTPLpr] C:\Program Files\Synaptics\SynTP\SynTPLpr.exe
    O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
    O4 - HKLM\..\Run: [HPHUPD05] c:\Program Files\Hewlett-Packard\{45B6180B-DCAB-4093-8EE8-6164457517F0}\hphupd05.exe
    O4 - HKLM\..\Run: [HPHmon05] C:\WINDOWS\system32\hphmon05.exe
    O4 - HKLM\..\Run: [Cpqset] C:\Program Files\HPQ\Default Settings\cpqset.exe
    O4 - HKLM\..\Run: [eabconfg.cpl] C:\Program Files\HPQ\Quick Launch Buttons\EabServr.exe /Start
    O4 - HKLM\..\Run: [TkBellExe] "C:\Program Files\K-Lite Codec Pack\Real\Update_OB\realsched.exe" -osboot
    O4 - HKLM\..\Run: [MMTray] "C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe"
    O4 - HKLM\..\Run: [mmtask] "C:\Program Files\MUSICMATCH\MUSICMATCH Jukebox\mmtask.exe"
    O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
    O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
    O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
    O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
    O4 - HKLM\..\Run: [COMODO Firewall Pro] "C:\Program Files\COMODO\Firewall\cfp.exe" -h
    O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
    O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe"
    O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
    O4 - HKCU\..\Run: [MsnMsgr] "C:\Program Files\Windows Live\Messenger\MsnMsgr.Exe" /background
    O4 - HKCU\..\Run: [swg] C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
    O4 - HKCU\..\Run: [Skype] "C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized
    O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Paikallinen palve')
    O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Verkkopalve')
    O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
    O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
    O4 - Global Startup: Adobe Gamma Loader.lnk = ?
    O4 - Global Startup: HP Digital Imaging Monitor.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqtra08.exe
    O4 - Global Startup: HP Image Zone -pikakäynnistys.lnk = C:\Program Files\Hewlett-Packard\Digital Imaging\bin\hpqthb08.exe
    O4 - Global Startup: Logitech SetPoint.lnk = C:\Program Files\Logitech\SetPoint\KEM.exe
    O8 - Extra context menu item: &Windows Live Search - res://C:\Program Files\Windows Live Toolbar\msntb.dll/search.htm
    O8 - Extra context menu item: Avaa uuteen etuvälilehteen - res://C:\Program Files\Windows Live Toolbar\Components\fi-fi\msntabres.dll.mui/230?20c14230637e4cad9560876846ed7244
    O8 - Extra context menu item: Avaa uuteen taustavälilehteen - res://C:\Program Files\Windows Live Toolbar\Components\fi-fi\msntabres.dll.mui/229?20c14230637e4cad9560876846ed7244
    O8 - Extra context menu item: Vie Microsoft E&xceliin - res://C:\PROGRA~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
    O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
    O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_07\bin\ssv.dll
    O9 - Extra button: Lisää tämä blogiin - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra 'Tools' menuitem: &Lisää tämä blogiin tuotteessa Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files\Windows Live\Writer\WriterBrowserExtension.dll
    O9 - Extra button: Oheistiedot - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~2\OFFICE11\REFIEBAR.DLL
    O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
    O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
    O9 - Extra button: Tuki - {1F2CA859-F258-49F4-82DC-F19AEE5D9788} - http://tuki.elisa.net/ (file missing) (HKCU)
    O9 - Extra button: SMS-viesti - {E5F0EF26-9856-462C-A2F8-FC6EF7F7368E} - http://sms.kolumbus.fi/ (file missing) (HKCU)
    O9 - Extra button: Palvelut - {FE38BD7A-B524-48A1-89B0-32E2D3E090A0} - http://service.kolumbus.fi/ (file missing) (HKCU)
    O14 - IERESET.INF: START_PAGE_URL=http://elisa.net/
    O16 - DPF: {3B36B017-7E49-426B-95B0-B5CECD83C2E2} (IfolorUploader Control) - http://fika-web.ifolor.net/OrderingGeneral/LowRes/app_support/ActiveX/IfolorUploader_fika.cab
    O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
    O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - ALWIL Software - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
    O23 - Service: avast! Antivirus - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashServ.exe
    O23 - Service: avast! Mail Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe
    O23 - Service: avast! Web Scanner - ALWIL Software - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe
    O23 - Service: COMODO Firewall Pro Helper Service (cmdAgent) - Unknown owner - C:\Program Files\COMODO\Firewall\cmdagent.exe
    O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
    O23 - Service: HP WMI Interface (hpqwmi) - Hewlett-Packard Development Company, L.P. - C:\Program Files\HPQ\SHARED\HPQWMI.exe
    O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
    O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
    O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe

    --
    End of file - 10483 bytes
     
    teamsfv, 28.08.2008
    #28
  10. Hujo

    Hujo Guest

    Hyvähän tuosta tuli
     
    Hujo, 28.08.2008
    #29
  11. teamsfv

    teamsfv Member

    Liittynyt:
    15.12.2005
    Viestejä:
    42
    Kiitokset:
    0
    Pisteet:
    16
    Hieno homma.

    Kiittää ja kuittaa.
     
    Viimeksi muokattu: 28.08.2008
    teamsfv, 28.08.2008
    #30
Sivu 2 / 2

Jaa tämä sivu